UK Government Launches Cyber Resilience Pledge to Strengthen Business Defences

The UK government has launched a new initiative called the Cyber Resilience Pledge, urging businesses across the country to strengthen their cyber defences. This voluntary pledge, designed for medium and large organisations but open to all sizes and sectors, asks signatories to take three concrete actions to improve their cyber security: making cyber security a board-level responsibility, registering for the NCSC’s free Early Warning service, and taking a risk-based approach to requiring the government-backed Cyber Essentials certification across their supply chain.

The pledge has already gained support from major firms such as M&S, Nationwide, ITV, Microsoft UK, and Cloudflare. These companies have committed to taking practical steps to enhance their cyber resilience, including board-level oversight and the use of NCSC tools. The initiative forms a central pillar of the government’s National Cyber Action Plan, aimed at raising cyber resilience across the UK economy.

With cyber attacks costing the UK £14.7 billion a year, the need for stronger defences has never been more urgent. The NCSC highlights that the average cost of a significant cyber-attack on an individual UK business is nearly £195,000, with the threat evolving rapidly due to advancements in AI technology. As AI provides new capabilities for defenders, it also lowers the barriers for attackers, making it easier for them to find weaknesses in software and exploit them at an unprecedented speed and scale.

The Cyber Resilience Pledge is a step towards ensuring that businesses of all sizes take cyber security seriously. By implementing these measures, organisations can better protect themselves, their supply chains, and their customers against AI-driven cyber threats. The initiative underscores the importance of cyber resilience as a business imperative, not just an IT issue.

As the threat landscape continues to evolve, the government’s efforts to strengthen cyber defences are crucial for the UK’s economic security. The Cyber Resilience Pledge is a practical and achievable step that organisations can take to improve their cyber security posture and contribute to a more resilient economy.